Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3138372e36302e3234302e302f32302d3230203d3e203631383332.roa
File: 3138372e36302e3234302e302f32302d3230203d3e203631383332.roa (raw, json)
Hash identifier: sd0MlVxQB4QQ0dmjgD6XHwU+BgDvEEfm4R3+8CX8RJI=
Subject key identifier: 72:F1:32:A3:05:82:4B:CC:D6:78:3E:F6:F6:21:71:52:85:B0:86:2B
Certificate issuer: /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial: 62C465330EEA6EBFC8681A31E29236A676B57F8B
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3138372e36302e3234302e302f32302d3230203d3e203631383332.roa
Signing time: Wed 29 Nov 2023 12:17:23 +0000
ROA not before: Wed 29 Nov 2023 12:12:23 +0000
ROA not after: Wed 27 Nov 2024 12:17:23 +0000
asID: 61832
IP address blocks: 187.60.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:c4:65:33:0e:ea:6e:bf:c8:68:1a:31:e2:92:36:a6:76:b5:7f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Validity
Not Before: Nov 29 12:12:23 2023 GMT
Not After : Nov 27 12:17:23 2024 GMT
Subject: CN=72F132A305824BCCD6783EF6F621715285B0862B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3f:77:b3:0e:56:6d:d8:a7:e5:bd:7c:82:71:
3c:d7:85:d4:a6:b9:61:66:4a:4e:e0:e1:40:74:7a:
12:c5:70:8d:e6:45:d7:36:cd:7c:14:84:80:da:81:
eb:1b:dc:ca:ca:1f:7c:23:cb:c1:a7:89:23:56:64:
4d:41:dc:7c:a2:1a:04:36:b1:f4:8e:d4:dc:59:53:
b6:a0:42:95:38:f8:49:93:4c:a7:7f:87:77:73:e4:
38:0f:fb:96:09:fe:d1:96:eb:33:3b:be:7f:52:2c:
7c:6d:8d:0c:fe:cc:e4:1d:07:a6:eb:a7:cb:1a:98:
db:d0:2b:c2:fe:c5:6f:f4:02:f1:a5:ef:6c:51:52:
16:8a:82:a1:aa:1c:1c:f4:34:14:b2:34:76:0d:96:
a7:bb:1c:80:5f:45:60:28:a5:a8:c2:18:7d:5c:b6:
f9:4c:db:12:93:49:25:9c:37:6d:3b:72:8c:62:20:
0b:14:d3:1e:dd:61:1c:d2:33:ae:fc:12:b3:e0:20:
53:0f:b9:0d:58:df:5f:e6:1b:86:d9:bb:d4:18:bf:
dd:2e:f1:18:c5:b0:78:50:78:f6:3f:5e:4e:92:1a:
3a:cb:b1:18:b9:98:1b:1a:f8:9e:b0:87:a4:61:04:
b1:d6:e8:b9:c3:dc:62:9c:90:fb:d6:57:67:65:d5:
93:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F1:32:A3:05:82:4B:CC:D6:78:3E:F6:F6:21:71:52:85:B0:86:2B
X509v3 Authority Key Identifier:
keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3138372e36302e3234302e302f32302d3230203d3e203631383332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.60.240.0/20
Signature Algorithm: sha256WithRSAEncryption
11:1a:40:09:50:cf:61:1b:57:75:51:60:c3:67:45:2c:ea:f7:
f9:af:26:9e:31:f5:e9:1f:c0:59:48:2f:f3:35:fa:09:16:f7:
4f:5a:70:15:74:4f:1d:86:53:70:4d:cc:2a:8f:7e:08:ea:e9:
c5:9d:c0:b9:96:8e:99:1a:82:b4:25:00:3a:0c:e9:58:87:53:
aa:a0:43:80:6c:4c:b7:77:2d:6c:91:0f:82:bf:4c:6b:62:b5:
07:51:a6:95:d7:9d:79:ef:ad:d8:93:1c:cb:f7:49:93:d7:49:
78:0d:79:ea:b6:1e:00:bd:85:7b:90:89:da:ce:95:f4:31:a5:
30:9e:8c:75:ec:13:46:74:e8:14:c5:da:13:c7:e3:34:37:61:
a8:e5:e7:84:fb:74:ca:3c:61:b1:79:7d:e1:f5:8c:2d:32:e9:
da:9a:a9:34:3a:1e:18:e6:57:a1:7b:0a:2d:a2:9e:a2:5f:d7:
39:06:9e:f1:5f:52:bc:0a:94:dc:ac:07:8a:19:44:7d:d3:87:
42:5b:c2:7d:bd:2d:e0:46:e1:33:65:bf:95:17:b8:ef:8d:1e:
64:9f:eb:1a:96:3d:25:44:57:a6:5e:f9:35:23:6d:14:04:48:
09:75:40:ec:d8:b9:a9:0d:5d:b6:1c:19:76:bd:8a:d8:d0:c7:
e3:50:e7:f9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYsRlMw7qbr/IaBox4pI2pna1f4swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJBREE1N0Q4NjAxNjM0Mzk0RjREMDlFMkQwNTE3RTMw
MjlGRTk0MDAeFw0yMzExMjkxMjEyMjNaFw0yNDExMjcxMjE3MjNaMDMxMTAvBgNV
BAMTKDcyRjEzMkEzMDU4MjRCQ0NENjc4M0VGNkY2MjE3MTUyODVCMDg2MkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKP3ezDlZt2KflvXyCcTzXhdSm
uWFmSk7g4UB0ehLFcI3mRdc2zXwUhIDagesb3MrKH3wjy8GniSNWZE1B3HyiGgQ2
sfSO1NxZU7agQpU4+EmTTKd/h3dz5DgP+5YJ/tGW6zM7vn9SLHxtjQz+zOQdB6br
p8samNvQK8L+xW/0AvGl72xRUhaKgqGqHBz0NBSyNHYNlqe7HIBfRWAopajCGH1c
tvlM2xKTSSWcN207coxiIAsU0x7dYRzSM678ErPgIFMPuQ1Y31/mG4bZu9QYv90u
8RjFsHhQePY/Xk6SGjrLsRi5mBsa+J6wh6RhBLHW6LnD3GKckPvWV2dl1ZPbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUcvEyowWCS8zWeD729iFxUoWwhiswHwYDVR0j
BBgwFoAU0q2lfYYBY0OU9NCeLQUX4wKf6UAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1JXeHdxajlLa0NValVyUWE2MWM4Wm8xREhtSG1wVGtUOW5VZmphZlFm
dXEvMC9EMkFEQTU3RDg2MDE2MzQzOTRGNEQwOUUyRDA1MTdFMzAyOUZFOTQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QyQURBNTdEODYwMTYzNDM5
NEY0RDA5RTJEMDUxN0UzMDI5RkU5NDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NSV3h3cWo5S2tDVWpVclFhNjFjOFpvMURIbUhtcFRrVDluVWZqYWZRZnVxLzAv
MzEzODM3MmUzNjMwMmUzMjM0MzAyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzNjMx
MzgzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEuzzwMA0GCSqGSIb3DQEBCwUAA4IBAQARGkAJUM9h
G1d1UWDDZ0Us6vf5ryaeMfXpH8BZSC/zNfoJFvdPWnAVdE8dhlNwTcwqj34I6unF
ncC5lo6ZGoK0JQA6DOlYh1OqoEOAbEy3dy1skQ+Cv0xrYrUHUaaV1515763YkxzL
90mT10l4DXnqth4AvYV7kInazpX0MaUwnox17BNGdOgUxdoTx+M0N2Go5eeE+3TK
PGGxeX3h9YwtMunamqk0Oh4Y5lehewotop6iX9c5Bp7xX1K8CpTcrAeKGUR904dC
W8J9vS3gRuEzZb+VF7jvjR5kn+salj0lRFemXvk1I20UBEgJdUDs2LmpDV22HBl2
vYrY0MfjUOf5
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:39:55 2025 by rpki-client